Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1ab21982-e34f-3f37-ac6d-0b621a0c8ed8.roa
File:                     1ab21982-e34f-3f37-ac6d-0b621a0c8ed8.roa (raw, json)
Hash identifier:          220fQ0+RzoJDzW//gFN3hFz73HHvKfZHzbq6OsfuZU8=
Subject key identifier:   EC:29:6F:F4:B9:F5:5B:86:FC:21:5A:9C:62:50:09:39:D6:B7:19:3E
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858432E9F5C403CF4525801322B80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1ab21982-e34f-3f37-ac6d-0b621a0c8ed8.roa
Signing time:             Mon 11 Sep 2023 01:00:21 +0000
ROA not before:           Mon 11 Sep 2023 01:00:21 +0000
ROA not after:            Sun 10 Dec 2023 02:00:21 +0000
asID:                     12083
IP address blocks:        23.28.0.0/16 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2e:9f:5c:40:3c:f4:52:58:01:32:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 11 01:00:21 2023 GMT
            Not After : Dec 10 02:00:21 2023 GMT
        Subject: CN=ca5236d3-eed3-47a9-858b-785818093443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:c0:11:db:51:43:09:c7:13:1a:e2:a6:01:
                    26:06:e1:76:68:7f:4b:f3:c3:25:ef:79:87:de:1d:
                    16:2d:29:87:13:fe:ce:5d:54:19:c0:b2:12:7d:f9:
                    bc:f1:3e:f6:a5:c1:bc:0a:54:28:e9:78:e4:60:8b:
                    6d:01:e5:8d:ed:be:ab:28:15:c9:c0:d7:d5:57:ab:
                    b2:34:c9:70:10:c0:ce:d0:f6:13:1e:00:0e:f0:cc:
                    70:fe:05:0b:f7:c7:02:d2:65:b0:04:41:a8:40:e8:
                    81:7f:af:c6:6d:5b:e7:b2:eb:e0:95:84:f9:6e:d0:
                    bf:93:6d:3b:c7:30:74:ea:d7:b0:7b:c5:d2:ac:98:
                    35:70:22:5e:6c:56:3e:8f:b6:93:6e:7a:91:99:51:
                    99:9e:4d:e2:c3:d9:92:59:f5:7f:68:3d:d9:8a:17:
                    33:2e:9d:f4:1f:a3:3f:54:f6:51:d0:96:fd:f1:14:
                    47:c9:cb:27:a8:2a:c3:f6:3c:ca:c3:cf:4f:76:20:
                    72:0a:3f:16:b5:1d:76:61:08:eb:ec:7e:4b:78:7f:
                    37:84:4d:76:8c:59:18:59:88:9a:62:a4:7b:5c:d7:
                    b3:e8:e2:aa:0c:f9:99:e8:21:88:14:ab:f2:63:9c:
                    dc:34:7f:97:64:71:c9:4d:52:55:11:dc:b0:94:d5:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:29:6F:F4:B9:F5:5B:86:FC:21:5A:9C:62:50:09:39:D6:B7:19:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/1ab21982-e34f-3f37-ac6d-0b621a0c8ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:2e:ec:37:0d:09:1f:84:ff:a6:0f:99:9f:2f:2d:a2:08:
         b0:15:2b:a6:24:fd:da:96:c3:38:8a:60:da:2a:2c:5d:7a:70:
         b7:fa:7d:b5:c4:e6:47:aa:9e:cb:ec:65:ee:57:10:e3:3e:55:
         95:16:07:a1:7f:0b:92:a3:36:87:7c:bc:76:b0:aa:1e:60:60:
         ce:a4:d7:48:cb:7b:3c:d9:17:88:6a:76:fa:0d:ed:f2:2c:d4:
         f8:9c:03:90:ab:ab:3b:7b:50:2b:4e:7e:bc:85:cd:4c:27:c9:
         d2:06:03:38:e3:50:7c:46:9d:00:32:cb:74:9e:bc:e5:51:5a:
         9d:9b:d8:0c:7a:0b:d0:7d:a6:4d:d7:da:41:a0:10:7c:4b:77:
         61:5f:98:0b:fb:02:f7:f7:e4:a6:cd:03:eb:ec:4a:5b:ce:0b:
         4e:79:33:13:1d:cc:57:2b:32:a2:35:a8:06:a8:c5:03:56:08:
         95:7d:79:ad:01:22:4e:2b:99:0d:80:0e:66:d2:f1:ed:9d:27:
         df:86:be:47:44:21:e0:c3:de:fc:68:8f:5b:10:28:39:41:29:
         41:97:44:c9:bf:5c:3c:5c:7f:8c:e6:d8:a9:c3:57:9f:db:af:
         76:11:e2:f5:26:04:1c:19:c6:88:c0:35:6f:e1:0e:a1:c3:0c:
         b8:9d:06:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMun1xAPPRSWAEyK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTIzMDkxMTAxMDAyMVoXDTIzMTIxMDAyMDAyMVowLzEtMCsGA1UEAxMk
Y2E1MjM2ZDMtZWVkMy00N2E5LTg1OGItNzg1ODE4MDkzNDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrjAEdtRQwnHExripgEmBuF2aH9L88Ml73mH
3h0WLSmHE/7OXVQZwLISffm88T72pcG8ClQo6XjkYIttAeWN7b6rKBXJwNfVV6uy
NMlwEMDO0PYTHgAO8Mxw/gUL98cC0mWwBEGoQOiBf6/GbVvnsuvglYT5btC/k207
xzB06tewe8XSrJg1cCJebFY+j7aTbnqRmVGZnk3iw9mSWfV/aD3ZihczLp30H6M/
VPZR0Jb98RRHycsnqCrD9jzKw89PdiByCj8WtR12YQjr7H5LeH83hE12jFkYWYia
YqR7XNez6OKqDPmZ6CGIFKvyY5zcNH+XZHHJTVJVEdywlNXYIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOwpb/S59VuG/CFanGJQCTnWtxk+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMWFiMjE5ODItZTM0Zi0z
ZjM3LWFjNmQtMGI2MjFhMGM4ZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAFxwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALtsu7DcNCR+E/6YPmZ8vLaIIsBUrpiT92pbDOIpg2iosXXpwt/p9tcTm
R6qey+xl7lcQ4z5VlRYHoX8LkqM2h3y8drCqHmBgzqTXSMt7PNkXiGp2+g3t8izU
+JwDkKurO3tQK05+vIXNTCfJ0gYDOONQfEadADLLdJ685VFanZvYDHoL0H2mTdfa
QaAQfEt3YV+YC/sC9/fkps0D6+xKW84LTnkzEx3MVysyojWoBqjFA1YIlX15rQEi
TiuZDYAOZtLx7Z0n34a+R0Qh4MPe/GiPWxAoOUEpQZdEyb9cPFx/jObYqcNXn9uv
dhHi9SYEHBnGiMA1b+EOocMMuJ0GmQ==
-----END CERTIFICATE-----